172 matches found
SUSE: Security Advisory (SUSE-SU-2014:1458-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : NetworkManager / and / libnma (ELSA-2021-1574)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1574 advisory. libnma 1.8.30-2 - Rebuild with new gtk-doc to fix multilib issues rh 1853152 NetworkManager 1.30.0-7.0.1 - add connectivity check via Oracle servers Orabug:...
RHEL 8 : NetworkManager and libnma (RHSA-2021:1574)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1574 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when availabl...
SUSE: Security Advisory (SUSE-SU-2014:1510-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : qt, qt5-qtbase (ALAS-2020-1574)
The version of qt installed on the remote host is prior to 4.8.5-15. The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1574 advisory. An issue was discovered in Qt through 5.12.9, and 5.13.x...
Microsoft Windows WebP Image Extension RCE (August 2020)
The Windows 'WebP Image Extension' or 'WebP from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this vulnerability via an specially crafted image to execute code and gain control of the...
CVE-2020-1574
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...
CVE-2020-1574 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
...
CVE-2020-1574
CVE-2020-1574 is a remote code execution vulnerability in the Microsoft Windows Codecs Library. The vulnerability arises from how the Codecs Library handles objects in memory, enabling arbitrary code execution when a program processes a specially crafted image file. Public documentation confirms ...
Palo Alto Expedition < 1.1.13 Cross-Site Scripting Vulnerability (PAN-SA-2019-0009)
A cross-site scripting XSS vulnerability exists in Palo ALto Expedition Migration Tool due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary...
Out-Of-Bounds Write
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Out-Of-Bounds Read
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Heap-Based Buffer Overflow
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
CVE-2019-1574
CVE-2019-1574 describes a cross-site scripting (XSS) vulnerability in the Palo Alto Networks Expedition Migration Tool (versions up to 1.1.12). An authenticated attacker can craft a link to execute arbitrary JavaScript/HTML in the user’s Devices View due to improper input validation. Affected rel...
Cross-Site Scripting in Expedition Migration Tool
A cross-site scripting XSS vulnerability exist in the Palo Alto Networks Migration Tool “Expedition”. Ref MT-1009/ CVE-2019-1574 Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML in the Devices View. This issue affects Expedition 1.1....
CentOS Update for sudo CESA-2017:1574 centos7
Check the version of sudo SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882743";...
RedHat Update for sudo RHSA-2017:1574-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
sudo security update
CentOS Errata and Security Advisory CESA-2017:1574 An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A...
Moderate: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...
